Hi All,
I've been unsuccessfull at trying to fix what appears to be a nasty
forwarding loop.
After going through old posts concerning the matter, nothing seems to
address the
issue. Some information:
The Squid proxy in question has 1 interface (eth0 10.3.0.251).
We have a hardware router that sits infront of it and intercepts all
traffic and redirects
all traffic that comes through the router on port 80 and transparently
redirects
it to port 3128 on the proxy. I've setup iptables to redirect it to Squid:
iptables -t nat -A PREROUTING -i eth0 -p tcp --dport 3128 -j REDIRECT
--to-port 3129
Squid Cache: Version 3.1.1 config:
http_port 3129 transparent
visible_hostname lnx-proxy7.theweb.co.za
half_closed_clients off
Browsing "works fine" for most people. But occasionally i get the
following in access.log
1272042637.252 9974 10.3.0.251 TCP_MISS/000 0 GET
http://10.3.0.251:3128/ - DIRECT/10.3.0.251 -
1272042637.252 9974 10.3.0.251 TCP_MISS/000 0 GET
http://10.3.0.251:3128/ - DIRECT/10.3.0.251 -
1272042637.253 9974 10.3.0.251 TCP_MISS/000 0 GET
http://10.3.0.251:3128/ - DIRECT/10.3.0.251 -
1272042637.253 9974 10.3.0.251 TCP_MISS/000 0 GET
http://10.3.0.251:3128/ - DIRECT/10.3.0.251 -
In cache.log i see errors along the following:
2010/04/23 19:13:27| WARNING: Forwarding loop detected for:
GET / HTTP/1.1
Via: 1.1 lnx-proxy7.theweb.co.za (squid/3.1.1)
X-Forwarded-For: 10.2.29.125
Host: 10.3.0.251:3129
Cache-Control: max-age=259200
Connection: keep-alive
2010/04/23 19:13:27| WARNING: Forwarding loop detected for:
GET / HTTP/1.1
Host: 10.3.0.251:3129
Via: 1.1 lnx-proxy7.theweb.co.za (squid/3.1.1), 1.1
lnx-proxy7.theweb.co.za (squid/3.1.1)
X-Forwarded-For: 10.2.29.125, 10.3.0.251
Cache-Control: max-age=259200
Connection: keep-alive
2010/04/23 19:13:27| WARNING: Forwarding loop detected for:
GET / HTTP/1.1
Host: 10.3.0.251:3129
Via: 1.1 lnx-proxy7.theweb.co.za (squid/3.1.1), 1.1
lnx-proxy7.theweb.co.za (squid/3.1.1), 1.1 lnx-proxy7.theweb.co.za
(squid/3.1.1)
X-Forwarded-For: 10.2.29.125, 10.3.0.251, 10.3.0.251
Cache-Control: max-age=259200
Connection: keep-alive
And it keeps growing and growing. Does anyone have an ideas?
Regards,
Cami
